
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa
File: 5b047369-1853-3c0b-830c-d67137c9c298.roa (raw, json)
Hash identifier: mgd/sIXYYUh3+JIVLMFDh3/c5Lz+ypKmU51ygFiiIjo=
Subject key identifier: 35:E3:F5:BF:4C:A9:1F:BE:A8:9E:EC:6D:FB:8C:44:DC:A7:41:D6:E3
Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial: 010D0C9F4328584EA17A8490274D54AAF8B1DD80
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa
Signing time: Sun 26 Jul 2026 21:00:11 +0000
ROA not before: Sun 26 Jul 2026 21:00:11 +0000
ROA not after: Sat 24 Oct 2026 21:00:11 +0000
asID: 59
IP address blocks: 198.51.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a1:7a:84:90:27:4d:54:aa:f8:b1:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Validity
Not Before: Jul 26 21:00:11 2026 GMT
Not After : Oct 24 21:00:11 2026 GMT
Subject: CN=f143a253-c4c3-4a96-92d6-ffc9ecf2d5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:86:a2:31:8d:2d:05:30:2e:a4:61:30:31:
85:d6:85:98:f5:92:d4:f0:f4:53:dd:97:18:73:a5:
23:2c:71:66:d5:67:08:bd:b7:2f:da:f1:d3:0b:93:
4a:f8:e2:de:db:80:03:fe:ea:d6:30:b4:17:b7:f2:
f3:33:25:13:df:a5:1b:e0:73:d1:1a:78:66:0c:3e:
b1:82:33:8b:45:99:b9:58:4c:90:ad:58:9e:1a:ae:
d9:9c:fc:bf:19:fd:1d:28:f1:e8:2d:c4:3b:20:a8:
e6:1e:2b:2c:d3:19:c4:54:32:2a:7e:c4:4e:b9:12:
7a:60:73:c0:36:5d:17:cb:8a:92:cd:27:82:29:e8:
15:17:20:74:69:72:26:1e:6e:20:f1:57:c0:94:e5:
8d:3e:1f:01:c7:68:84:0c:c4:30:46:62:37:f1:7c:
51:b1:e7:dd:a3:76:c8:4f:51:0c:3a:1e:2d:3b:f0:
b2:a1:47:0d:a0:dc:ca:3b:87:b5:17:ac:a0:3d:86:
4c:62:19:6f:4d:76:39:37:0e:f9:62:88:13:cd:0d:
13:5e:24:ae:c6:72:a8:18:cc:4f:b1:77:ad:10:f5:
5b:40:ba:54:b6:7f:26:8f:91:32:d3:25:a8:6d:c8:
65:48:0f:d2:98:b9:97:a0:e8:a3:37:55:11:dd:b2:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E3:F5:BF:4C:A9:1F:BE:A8:9E:EC:6D:FB:8C:44:DC:A7:41:D6:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
X509v3 Authority Key Identifier:
keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
sbgp-ipAddrBlock: critical
IPv4:
198.51.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:06:54:2a:5b:ea:94:b0:ce:5c:90:82:c3:b1:a0:fe:6c:5b:
34:49:fc:1c:54:bf:42:8f:26:42:d8:b4:c6:b1:d2:72:3b:52:
67:ea:a4:10:4d:42:42:25:6a:f6:35:91:5b:54:74:2b:3e:5b:
6a:b6:ab:b7:dc:0d:41:d5:1d:28:eb:c0:b2:92:cc:68:41:50:
27:41:8a:e4:73:f3:de:a9:03:98:e1:85:6b:e6:b3:c1:63:58:
ca:55:3a:67:47:05:22:33:79:dc:2a:c9:0b:c9:28:44:5a:34:
65:d5:9a:4c:28:61:d6:dd:de:9b:79:0f:93:c5:bb:58:eb:73:
80:1a:69:18:33:3d:d0:c3:5b:6c:28:80:95:bc:02:6d:59:9a:
4b:d6:f6:6d:59:24:ac:43:56:7f:e8:28:c1:a8:72:ae:71:61:
11:84:07:d2:0b:40:30:5f:3c:66:89:64:25:d3:35:6b:8b:10:
da:98:58:42:6f:2d:bf:a7:4f:b0:e5:fa:f5:16:c4:64:85:1c:
79:b7:d9:7f:96:49:64:82:a1:29:63:5a:3c:5f:0a:c2:ec:fe:
b5:cd:f3:c8:1e:29:c5:9b:fb:1c:64:dd:95:3f:6f:2f:33:82:
a8:b7:55:86:c7:d1:ae:89:b4:24:19:c5:2a:4d:5f:b7:90:60:
11:2c:90:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:45 2026 by rpki-client